Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: pyJVopjc/4me9m+DkssLEi8gcrTthBGMD7e2R000b/o=
Subject key identifier: 70:28:95:F4:F1:35:7D:D0:9A:F9:E1:11:58:75:AB:D7:58:01:4A:B7
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 01989F70F3A318C027633BE1234285203126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 0F86
Signing time: Tue 12 Aug 2025 18:00:36 +0000
Manifest this update: Tue 12 Aug 2025 18:00:36 +0000
Manifest next update: Wed 13 Aug 2025 18:00:36 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: L/5v+xyTd3WcHUgMKIFZkp0ZQxIbyEcgtRcBkFnbxQQ=)
2: NLn-NADuc0yAyX0f_4G1dKCqIP8.roa (hash: dkLXs7qu9ok1KeNheDJk9SO+sT7GSZT5TJ1FucBWHfg=)
3: ju7OLwWOvoLnlAHiuO4kBTFVzwY.roa (hash: e9FAsffXnl64K8Cv3+KjxTUevpgUYG3UY/wewoBEVBQ=)
4: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:70:f3:a3:18:c0:27:63:3b:e1:23:42:85:20:31:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Aug 12 18:00:36 2025 GMT
Not After : Aug 13 18:00:36 2025 GMT
Subject: CN=702895f4f1357dd09af9e1115875abd758014ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:f1:60:89:de:29:97:6c:36:9b:e5:00:52:
0f:7c:d5:7a:64:4a:7d:9d:e0:38:34:b3:3c:fe:41:
5e:5c:40:95:ca:bd:d1:2e:1e:6f:32:99:ba:6f:2d:
2c:77:07:2a:cc:18:d1:14:49:6e:05:93:c1:96:d3:
dd:d7:22:cb:8b:61:55:a4:96:a5:e9:c7:05:02:ce:
f8:18:60:cc:f2:c0:88:6e:e7:6a:aa:e5:dc:0d:bf:
f5:c4:f8:52:8d:37:56:3c:8a:a6:96:3a:89:a7:34:
d2:c4:fd:4a:1e:51:6c:0f:cc:47:da:c2:2b:a6:c7:
78:4f:e1:bd:63:73:ed:11:a2:c9:cc:1a:ba:29:df:
14:1a:f6:18:6c:09:bf:51:43:50:dd:e6:df:ce:f2:
d5:d7:c1:15:cd:23:cd:f5:5b:77:bb:38:e0:9e:af:
ba:20:e3:c8:22:83:2d:bd:d6:76:94:ef:b7:73:81:
64:4d:ec:e9:14:16:fb:38:61:87:cc:89:ee:ea:65:
41:1c:40:0e:44:fa:f7:db:b8:65:63:88:b7:2f:c3:
6a:02:15:4e:52:6b:38:0a:36:2a:3a:e7:77:33:d8:
a1:0f:3a:ab:7f:49:9c:5e:b1:a5:19:68:a4:eb:ba:
40:38:80:7a:5e:e6:f7:e2:17:ef:d0:4f:22:d3:54:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:28:95:F4:F1:35:7D:D0:9A:F9:E1:11:58:75:AB:D7:58:01:4A:B7
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:45:56:03:12:63:be:94:1c:7e:1f:7c:91:3e:2b:b3:cc:89:
d5:d0:43:88:79:c0:98:71:29:fb:13:db:2a:91:ee:88:a7:a2:
4d:05:12:2b:4f:06:02:6a:d3:98:bd:44:6e:45:d6:d9:bf:d4:
b9:87:50:2f:ef:76:00:46:0d:15:75:1e:28:b0:53:d1:d4:9e:
39:ce:8f:be:6d:da:a3:18:3a:a2:f0:66:fd:14:f3:e8:9d:23:
31:3b:8c:62:98:a2:11:a4:38:0a:8d:47:5d:4b:88:d7:5a:4a:
3b:45:c4:f9:6e:2b:67:a2:49:0b:fb:ce:cf:43:42:d9:7d:3b:
e9:4b:ec:d1:86:76:b2:d0:ba:e8:72:b2:2a:5c:7d:d2:77:60:
1e:31:d2:25:9e:e3:94:f0:dc:70:a3:21:49:fc:0c:83:2c:5d:
5c:dd:b0:13:ec:e6:01:ae:5b:cd:b1:77:24:ca:79:9c:46:7d:
3a:58:78:ff:04:bd:ae:97:b0:ee:ff:58:3f:cb:29:34:5e:35:
58:8f:2a:2f:03:01:6b:9a:d2:30:bd:84:b2:70:ce:5b:63:b4:
f9:13:87:9a:74:3c:d0:60:62:ff:fa:9e:15:42:cd:73:28:52:
79:ab:7f:76:5d:af:2f:81:65:24:79:bb:ee:4d:29:2e:fd:f7:
91:52:8c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:23 2025 by rpki-client